Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a3a2f33342d3334203d3e20323732353138.roa
File:                     323830343a383236383a3a2f33342d3334203d3e20323732353138.roa (raw, json)
Hash identifier:          JRmzfNGpg/29BViI5J90w3B4mE9wS0FnfnNNBzvide4=
Subject key identifier:   4C:F2:5E:92:BE:86:41:C6:1B:D9:C0:98:35:90:6D:2B:CB:0D:14:28
Certificate issuer:       /CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
Certificate serial:       39179906D707B2BE68F535E52969AACC86D6D64B
Authority key identifier: 31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a3a2f33342d3334203d3e20323732353138.roa
Signing time:             Wed 01 Oct 2025 02:16:54 +0000
ROA not before:           Wed 01 Oct 2025 02:11:54 +0000
ROA not after:            Wed 30 Sep 2026 02:16:54 +0000
asID:                     272518
IP address blocks:        2804:8268::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl
                          rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:17:99:06:d7:07:b2:be:68:f5:35:e5:29:69:aa:cc:86:d6:d6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
        Validity
            Not Before: Oct  1 02:11:54 2025 GMT
            Not After : Sep 30 02:16:54 2026 GMT
        Subject: CN=4CF25E92BE8641C61BD9C09835906D2BCB0D1428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2e:1a:20:33:05:bb:0e:74:b4:36:00:24:fd:
                    c0:68:6f:50:a8:2f:a7:bc:a9:fc:f3:d9:00:8e:ac:
                    a9:8a:2c:f3:89:aa:ca:46:b8:24:af:29:b9:c9:17:
                    18:8c:10:bd:89:2e:d1:b2:32:26:88:85:a4:7c:37:
                    29:f4:9f:f0:17:8e:eb:e9:0c:31:26:17:e9:90:d0:
                    5c:30:a5:2c:5a:2c:42:83:64:ad:ae:67:85:5b:95:
                    7e:7f:5e:ff:c1:83:b3:38:e9:0a:7a:d8:af:75:1a:
                    1b:0a:84:6f:a1:81:d9:16:72:29:02:75:ac:be:0c:
                    1c:44:06:7a:c9:60:08:49:b0:54:ab:1f:e6:bf:09:
                    21:e9:14:88:46:48:19:ce:c8:64:32:d9:ea:b5:df:
                    e0:68:25:45:ac:b0:a5:a2:88:76:8a:ad:4d:1e:cb:
                    9b:20:1c:f9:0c:c5:a5:ff:73:cb:18:bc:52:92:39:
                    b9:80:25:55:25:af:b5:01:a3:bd:c4:21:40:f5:c9:
                    b9:6f:cf:b7:0e:81:58:30:e9:5f:cc:05:fa:54:1f:
                    4d:8b:0d:d9:9a:6c:b6:09:2e:e0:a8:84:8c:87:3e:
                    6b:00:4a:45:c4:8b:ec:85:6d:60:36:ea:b9:0f:8a:
                    b2:e6:b8:6f:5e:b3:69:c8:d3:01:86:0c:ae:02:d6:
                    3a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F2:5E:92:BE:86:41:C6:1B:D9:C0:98:35:90:6D:2B:CB:0D:14:28
            X509v3 Authority Key Identifier:
                keyid:31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a3a2f33342d3334203d3e20323732353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8268::/34

    Signature Algorithm: sha256WithRSAEncryption
         7f:44:94:4f:a7:83:2f:c0:34:47:06:df:fc:04:10:00:eb:ea:
         45:86:ed:c9:f7:2d:b0:27:44:a5:d7:13:cd:fa:f9:e1:f0:46:
         cf:dd:83:e5:7a:26:cc:ea:e0:66:6c:0b:97:bc:9b:b8:03:60:
         b4:23:2b:3a:e4:61:57:4d:87:db:c9:fe:42:7e:7c:62:c4:65:
         46:6b:21:2b:d3:7b:d7:4b:bc:a3:3c:a7:4e:82:ec:26:dc:4f:
         c8:08:f9:bd:4e:2f:87:c6:bc:c7:37:73:a2:97:47:9e:ea:65:
         b9:6b:89:ef:e6:99:d2:80:ab:01:d1:a6:09:8f:4b:89:70:72:
         5e:b2:4b:15:55:61:41:2d:99:8a:df:90:97:bb:64:e6:44:97:
         d3:28:10:40:a4:59:6b:1c:3b:19:14:12:ad:c9:7e:e3:83:61:
         f6:0e:63:72:45:47:c2:6d:06:4d:3d:73:0d:d7:9e:42:f4:4c:
         6d:27:b3:d5:80:ae:08:1d:43:5a:57:91:33:04:ee:10:f4:04:
         7e:33:74:54:d9:86:d6:c0:d2:28:a2:31:49:3c:81:75:77:1f:
         24:d6:af:31:a9:5a:29:40:b8:f1:6d:1e:e5:a3:f2:38:63:91:
         ab:36:de:73:e7:16:4a:2f:5a:51:69:aa:f1:eb:11:4b:b8:8f:
         f0:33:aa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:46:54 2025 by rpki-client